Deployment Kit used in Spotfire Server vulnerabilities

2 known vulnerabilities in Deployment Kit used in Spotfire Server from Spotfire. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Spotfire Statistics Services: Improper Control of Generation of Code

  CVE-2025-3115Apr 9, 2025Spotfire

  Injection Vulnerabilities: Attackers can inject malicious code, potentially gaining control over the system executing these functions. Additionally, insufficient validation of filenames during file uploads can enable attackers to upload and execute malicious f

• 9.4 Critical severity

  Spotfire Enterprise Runtime for R: Improper Control of Generation of Code

  CVE-2025-3114Apr 9, 2025Spotfire

  Code Execution via Malicious Files: Attackers can create specially crafted files with embedded code that may execute without adequate security validation, potentially leading to system compromise. Sandbox Bypass Vulnerability: A flaw in the TERR security mecha